Microsoft
Microsoft .net Core: vulnerabilidades y CVE
Microsoft .net Core tiene 32 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE32
Últimos 12 meses0
Críticas2
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2020-1147 | Alta (7.8) | 94% | ⚠ Explotación activa | 14 jul 2020 | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-41032 | Alta (7.8) | 1.1% | — | 11 oct 2022 | NuGet Client Elevation of Privilege Vulnerability |
| CVE-2022-38013 | Alta (7.5) | 4.0% | — | 13 sept 2022 | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2022-34716 | Media (5.9) | 2.3% | — | 9 ago 2022 | .NET Spoofing Vulnerability |
| CVE-2022-30184 | Media (5.5) | 5.6% | — | 15 jun 2022 | .NET and Visual Studio Information Disclosure Vulnerability |
| CVE-2022-29145 | Alta (7.5) | 5.4% | — | 10 may 2022 | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-29117 | Alta (7.5) | 5.7% | — | 10 may 2022 | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-23267 | Alta (7.5) | 5.7% | — | 10 may 2022 | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-24512 | Media (6.3) | 1.6% | — | 9 mar 2022 | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2022-24464 | Alta (7.5) | 3.6% | — | 9 mar 2022 | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2021-34485 | Media (5.5) | 1.5% | — | 12 ago 2021 | .NET Core and Visual Studio Information Disclosure Vulnerability |
| CVE-2021-26423 | Alta (7.5) | 3.9% | — | 12 ago 2021 | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2021-31957 | Alta (7.5) | 5.1% | — | 8 jun 2021 | ASP.NET Core Denial of Service Vulnerability |
| CVE-2021-31204 | Alta (7.8) | 1.4% | — | 11 may 2021 | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2021-26701 | Crítica (9.8) | 30% | — | 25 feb 2021 | .NET Core Remote Code Execution Vulnerability |
| CVE-2021-24112 | Crítica (9.8) | 3.3% | — | 25 feb 2021 | .NET Core Remote Code Execution Vulnerability |
| CVE-2021-1721 | Media (6.5) | 3.3% | — | 25 feb 2021 | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2020-8927 | Media (6.5) | 3.2% | — | 15 sept 2020 | A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying… |
| CVE-2020-1147 | Alta (7.8) | 94% | ⚠ Explotación activa | 14 jul 2020 | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and… |
| CVE-2020-1108 | Alta (7.5) | 6.3% | — | 21 may 2020 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or… |
| CVE-2020-0606 | Alta (8.8) | 17% | — | 14 ene 2020 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context… |
| CVE-2020-0605 | Alta (8.8) | 18% | — | 14 ene 2020 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context… |
| CVE-2019-1301 | Alta (7.5) | 5.3% | — | 11 sept 2019 | A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'. |
| CVE-2019-0981 | Alta (7.5) | 4.9% | — | 16 may 2019 | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820,… |
| CVE-2019-0980 | Alta (7.5) | 4.9% | — | 16 may 2019 | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820,… |
| CVE-2019-0820 | Alta (7.5) | 5.7% | — | 16 may 2019 | A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980,… |
| CVE-2019-0657 | Media (5.9) | 4.5% | — | 5 mar 2019 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'. |
| CVE-2019-0545 | Alta (7.5) | 9.6% | — | 8 ene 2019 | An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This… |
| CVE-2018-8409 | Alta (7.5) | 6.6% | — | 13 sept 2018 | A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1. |
| CVE-2018-8356 | Media (5.5) | 0.75% | — | 11 jul 2018 | A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework… |
| CVE-2018-0765 | Alta (7.5) | 8.3% | — | 9 may 2018 | A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.